Automatic workstation functionality management based on login credentials

Abstract

The present disclosure involves systems, software, and computer implemented methods for automatically controlling access and limiting functionality of a computer workstation based on which user is currently logged in. In some implementations, an overwatch application is installed on the workstations to be controlled and monitored. If an authorized, but limited, user logs in, the overwatch application can initiate a lockdown process on the workstation. In some instances, the lockdown process is managed by a dedicated lockdown application, which is initiated or notified from the overwatch application, and which can initiate a lockdown of particular applications, functionality, and allowed interactions on the workstation until the limited user has completed their task and a new user logs in.

The invention claimed is: 
     
       1. A system for controlling workstation access, the system comprising:
 a communications interface; 
 at least one memory storing a repository of login credentials, a repository of authorization rules, and instructions; 
 at least one hardware processor interoperably coupled with the at least one memory and the communications interface, the instructions instructing the at least one hardware processor to perform operations comprising:
 executing an overwatch application associated with a workstation, the overwatch application monitoring logins to the workstation; 
 in response to detecting, by the overwatch application, a login initiated by a limited user, the login being associated with a set of credentials corresponding to the limited user that has access to authorized processes identified by a whitelist and a set of authorized hardware inputs of the workstation:
 initializing a lockdown application; 
 identifying, by the lockdown application and based on the whitelist, based on the authorization rules, and based on the set of credentials, the authorized processes, and non-authorized processes, wherein the authorized processes comprise one or more software processes permitted to execute on the workstation during the login of the limited user, and wherein the non-authorized processes comprise one or more software processes not permitted to execute on the workstation during the login of the limited user; 
 terminating, by the lockdown application, execution of the non-authorized processes; 
 identifying, by the lockdown application, a set of authorized hardware inputs based on the authorization rules and the set of credentials; and 
 monitoring, by the lockdown application, inputs associated with the workstation for receipt of unauthorized hardware inputs to the workstation. 
 
 
 
     
     
       2. The system of  claim 1 , the operations further comprising:
 in response to detecting, by the lockdown application, an unauthorized hardware input to the workstation, suppressing, by the lockdown application, the unauthorized hardware input. 
 
     
     
       3. The system of  claim 1 , the operations further comprising:
 in response to detecting, by the lockdown application, an attempt to initiate a process that is not an authorized process:
 transmitting, via the communications interface, an alert to a central server; and 
 executing a forced logout of the limited user. 
 
 
     
     
       4. The system of  claim 1 , wherein the overwatch application and lockdown application are remotely installed on the workstation by a server system. 
     
     
       5. The system of  claim 1 , wherein the login of the limited user comprises:
 receiving the set of credentials at the workstation; 
 transmitting, via the communications interface, the set of credentials to a server system, wherein the server system verifies the set of credentials as the set of credentials of an authorized, but limited user; and 
 receiving, via the communications interface, a login authorization to the workstation, wherein the login authorization comprises information associated with the authorization rules, and wherein the authorization rules are associated with the set of credentials that match stored credentials in the stored repository of login credentials. 
 
     
     
       6. The system of  claim 1 , wherein the limited user comprises a system user that is authorized to perform a particular set of tasks, wherein the particular set of tasks require only a subset of functionality associated with the workstation, and wherein the authorized processes correspond to the subset of functionality required by the particular set of tasks. 
     
     
       7. The system of  claim 6 , wherein the workstation is associated with a cash dispenser, and wherein the particular set of tasks comprises refilling the cash dispenser. 
     
     
       8. The system of  claim 1 , wherein, in response to detecting, by the overwatch application, the login by an authorized user, the operations further comprising:
 allowing full workstation functionality to the authorized user in response to the login. 
 
     
     
       9. The system of  claim 8 , wherein the authorized user is a bank teller associated with the workstation. 
     
     
       10. The system of  claim 1 , wherein the hardware inputs to the workstation comprise inputs from at least one of:
 a keyboard; 
 a mouse; 
 a removable memory; 
 a cash register; 
 a touchscreen; or 
 a microphone. 
 
     
     
       11. A non-transitory, computer-readable medium storing computer-readable instructions executable by a computer and configured to perform operations comprising:
 executing an overwatch application associated with a workstation, the overwatch application monitoring logins to the workstation; 
 in response to detecting, by the overwatch application, a login initiated by a limited user, the login being associated with a set of credentials corresponding to the limited user that has access to authorized processes identified by a whitelist and a set of authorized hardware inputs of the workstation:
 initializing a lockdown application; 
 identifying, by the lockdown application and based on the whitelist, based on the authorization rules, and based on the set of credentials, the authorized processes, and non-authorized processes, wherein the authorized processes comprise one or more software processes permitted to execute on the workstation during the login of the limited user, and wherein the non-authorized processes comprise one or more software processes not permitted to execute on the workstation during the login of the limited user; 
 terminating, by the lockdown application, execution of the non-authorized processes; 
 identifying, by the lockdown application, a set of authorized hardware inputs based on the authorization rules and the set of credentials; and 
 monitoring, by the lockdown application, inputs associated with the workstation for receipt of unauthorized hardware inputs to the workstation. 
 
 
     
     
       12. The non-transitory, computer-readable medium of  claim 11 , the operations further comprising:
 in response to detecting, by the lockdown application, an unauthorized hardware input to the workstation, suppress, by the lockdown application, the unauthorized hardware input. 
 
     
     
       13. The non-transitory, computer-readable medium of  claim 11 , the operations further comprising:
 in response to detecting, by the lockdown application, an attempt to initiate a process that is not an authorized process, transmitting, via a communications interface, an alert to a central server; and executing a forced logout of the limited user. 
 
     
     
       14. The non-transitory, computer-readable medium of  claim 11 , wherein the overwatch application and lockdown application are remotely installed on the workstation by a server system. 
     
     
       15. The non-transitory, computer-readable medium of  claim 11 , wherein the login of the limited user comprises:
 receiving the set of credentials at the workstation; 
 transmitting, via a communications interface, the set of credentials to a server system, wherein the server system verifies the set of credentials as the set of credentials of an authorized, but limited user; and 
 receiving, via the communications interface, a login authorization to the workstation, wherein the login authorization comprises information associated with the authorization rules, and wherein the authorization rules are associated with the set of credentials that match stored credentials in a stored repository of login credentials. 
 
     
     
       16. The non-transitory, computer-readable medium of  claim 11 , wherein the limited user comprises a system user that is authorized to perform a particular set of tasks, wherein the particular set of tasks require only a subset of functionality associated with the workstation, and wherein the authorized processes correspond to the subset of functionality required by the particular set of tasks. 
     
     
       17. A computerized method performed by one or more processors, the method comprising:
 executing an overwatch application associated with a workstation, the overwatch application monitoring logins to the workstation; 
 in response to detecting, by the overwatch application, a login initiated by a limited user, the login being associated with a set of credentials corresponding to the limited user that has access to authorized processes identified by a whitelist and a set of authorized hardware inputs of the workstation:
 initializing a lockdown application; 
 identifying, by the lockdown application and based on the whitelist, based on the authorization rules, and based on the set of credentials, the authorized processes, and non-authorized processes, wherein the authorized processes comprise one or more software processes permitted to execute on the workstation during the login of the limited user, and wherein the non-authorized processes comprise one or more software processes not permitted to execute on the workstation during the login of the limited user; 
 terminating, by the lockdown application, execution of the non-authorized processes; 
 identifying, by the lockdown application, a set of authorized hardware inputs based on the authorization rules and the set of credentials; and 
 monitoring, by the lockdown application, inputs associated with the workstation for receipt of unauthorized hardware inputs to the workstation. 
 
 
     
     
       18. The method of  claim 17 , further comprising:
 in response to detecting, by the lockdown application, an unauthorized hardware input to the workstation:
 suppressing, by the lockdown application, the unauthorized hardware input. 
 
 
     
     
       19. The method of  claim 17 , further comprising:
 in response to detecting, by the lockdown application, an attempt to initiate a process that is not an authorized process:
 transmitting, via a communications interface, an alert to a central server; and 
 executing a forced logout of the limited user. 
 
 
     
     
       20. The method of  claim 17 , wherein the overwatch application and lockdown application are remotely installed on the workstation by a server system.